e85a8fb9b2bf5f0cfb3767de13fc9610_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

e85a8fb9b2bf5f0cfb3767de13fc9610_NeikiAnalytics.exe
Size

300KB
MD5

e85a8fb9b2bf5f0cfb3767de13fc9610
SHA1

bde1f193dc6d4516a297022f33108000c0ccc7eb
SHA256

d27b173e81a4c52e0d5ef47e5b462e57ddfa5bb28339ccb487cba82c28d24835
SHA512

83daea2f3513464316a0d5fd288e211f74e7fbfcb3aab276a305d1c96f96da9a9efd78969a8352cae40bf688c68ad2cd194b57685ef46785fe6541b4e8584e26
SSDEEP

6144:fgeBwj9XS2qr9SrQkIF597z3gVSsTVdovB5TPM5Hil3mgY2Uf2:oeBmtEvrBeGG2u2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e85a8fb9b2bf5f0cfb3767de13fc9610_NeikiAnalytics.exe

Files

e85a8fb9b2bf5f0cfb3767de13fc9610_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

2e8a0233fe62dc05961f33dabed44ecf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetStdHandle
GlobalLock
GlobalUnlock

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

ole32

CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

user32

CloseClipboard
GetClipboardData
GetDC
GetSystemMetrics
GetWindowInfo
OpenClipboard
ReleaseDC

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
SelectPalette

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ